Hide secret content in error messages

NEW
Unassigned

Status

Taskcluster
Secrets
a year ago
a year ago

People

(Reporter: dustin, Unassigned)

Tracking

Details

(Reporter)

Description

a year ago
If you make an erroneous call to a secrets API method, tc-lib-api will helpfully echo your request back to you, and that may contain secrets.  Error handling often involves printing everything, which would include those secrets.

We should find a way (probably by adding a feature to tc-lib-api) to filter the secrets out of that response.
You need to log in before you can comment on or make changes to this bug.